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TN THE CLAIMS 

1. (Currently Amended) A method for implementing a network security level via a security 
switch, said security switch storing a modifiable list of trusted file extensions, said method as 
implemented in said network switch comprising the steps of: 

(a) receiving a request from a client to a serve r to retrieve an object : 

(b) parsing and identifying a file extension of the object associated with said 
received request; 

(c) comparing said identified file extension with said pre-stored list of trusted 
file extensions; and 

(d) forwarding the received request to an inspection gateway a upon not 
finding a successful match. 

2. (Currently Amended) The-^A method as per claim 1, wherein upon finding a successful 
match in step (c) forwarding said received request to said server. 

3. (Currently Amended) Ar -The method as per claim 1, wherein said steps (a) through (d) are 
performed upon verifying that said client is an authorized client. 

4. (Currently Amended) TheA method as per claim 1, wherein said steps (a) through (d) are 
performed upon verifying that said server is an authorized server. 
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5. (Currently Amended) TheA method as per claim I, wherein said security switch stores a 
modifiable list of trusted content-types, said method further comprising the steps of: 

receiving a reply from said server; 

parsing said reply to identify a content-type of an object contained in said reply; 

comparing said identified content-type of the object w ith said pre-stored list of trusted 
content-types; and 

upon finding a successful match, forwarding said reply to said client. 

6. (Currently Amended) TheA method as per claim 1, wherein said request is a HTTP 
request. 

7. (Currently Amended) The A method as per claim 1, wherein communication session 
between said client and said server is a TCP/IP session. 

8. (Currently Amended) The-Ar method as per claim 1, wherein said object is any of the 
following: an image file, an audio file, a video file, an active server page file, a script file, or 
a markup language-based file. 

9. (Currently Amended) The A method as per claim 1, wherein said security switch 
communicates with said server over a network, and said network is any of the following: 
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local area network (LAN), wide area network (WAN), metropolitan area network (MAN), 
wireless network, cellular network, or the Internet. 

10. (Currently Amended) An article of manufacture comprising a computer usabte-readable 
recording m edium having computer readable program code embodied therein for 
implementing a network security level via a modifiable list of trusted file extensions, said 
computer readable program executing steps of:m edfe»^ mnriQina: 

(a) comput e r readabl e program ood o ai di ng in receiving a request from a client to a server 
to receive an object : 

(b) o o m put B g- r - fladablo - progrom code p arsing and identifying a file extension of the object 
associated with a received request;. 

(c) eem putor readable program codo comparing an identified file extension with said pre- 
stored list of trusted file extensions; and 

(d) computer roadablo program code aiding in forwarding the received request to an 
inspection gateway. 

11. (Currently Amended) The article of manufactures of A m e thod as p e r claim 10, wherein 
the computer readable program code causes the forwarding of the received request to an 
inspection gateway upon not finding a successful match, and wherein upon finding a 
succcssfid match, further executing steps of comprising : 

(1) computer roadablo program codo forwarding a received request to a server, 
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(2) e omputor - roodable program codo r eceiving a reply from a server; and 

(3) comput e r r e adabl e pr - ogrem - codo aiding in forwarding a reply to a client. 

12. (Currently Amended) TheA -a article of manufacture as per claim 10, wherein said 
computer readable program stored on the computer readable recording m edium further 
executes steps of eeflapriseg: 

computer readabl e program ood e parsing a reply to identify a content-type of 
an object contained in said reply; 

comput e r roadablo program cod e-comparing an identified content-type with a 
pre-stored list of trusted content-types; and 

upon finding a successful match, computer readable program oodo forwarding 
said reply to said client. 

13. (Currently Amended) A method for implementing a network security level via a security 
switch, said security switch storing a modifiable list of trusted file extensions and a 
modifiable list of trusted content-types, said method as implemented in said network switch 
comprising the steps of: 

(a) receiving a request from a client to a serve r to retrieve an object : 

(b) parsing and identifying a file extension of the object associated with said 
received request; 
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(c) comparing said identified file extension with said pre-stored list of trusted 
file extensions; and 

(d) forwarding said received request to an inspection gateway upon not 
finding a successful match. 

14. (Currently amended) The A -metliod as per claim 13, wherein upon finding a successful 
match, further comprising: 

(1) forwarding said received request to said server; 

(2) receiving a reply from said server, 

(3) parsing said reply to identify a content-type of an object contained in 

said reply; 

(4) comparing said identified content-tvne of the object with said pre- 
stored list of trusted content-types; and 

(5) upon finding a successful match, forwarding said reply to said client. 

15. (Currently Amended) A -The m ethod as per claim 13, wherein said steps (a) through (d) 
are performed upon verifying that said client is an authorized client. 


16. (Currently Amended) A -The m ethod as per claim 13, wherein said steps (a) through (d) 
are performed upon verifying that said server is an authorized server. 
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17. (Currently Amended) A-The m ethod as per claim 13, wherein said request is a HTTP 
request and a communication session between said client and said server is a TCP/IP session. 

18. (Currently Amended) TlieA method as per claim 13, wherein said object is any of the 
following: an image file, an audio file, a video file, an active server page file, a script file, or 
amaiicup language-based file. 

19. (Currently Amended) The A method as per claim 13, wherein said security switch 
communicates with said server over a network, and said network is any of the following: 
local area network (LAN), wide area network (WAN), metropolitan area network (MAN), 
wireless network, cellular network, or the Internet. 

20. (Currently Amended) A system implementing network security for content exchanged 
between a client and a server over a network, said system comprising: 

(a) a security switch storing a modifiable list of trusted file extensions, said 
security switch: 

receives and parses requests to retrieve an object, t o identify a file extensionjrf 
the object associated with a received request; 

compares said identified file extension of the object w ith said pre-stored list of 
trusted file extensions; and 
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upon findiDg a successful match, forwards said received request to said server and 

receives a reply from said server; and 

(b) an inspection gateway working in conjunction with said security switch 
and receiving forwarded requests when a file extension of the object of a request fails to 
match trusted file extensions in said pre-stored list, said inspection gateway communicating 
with said server and retrieving, inspecting, and verifying an object related to said received 
request, and based upon successful verification, forwarding a reply to said security switch. 

21. (Currently Amended) A system as per claim 20, wherein said security switch further 
comprises a modifiable list of trusted content-types, and said security switch after reception 
of said reply from said server, 

parses said reply to identify a content-type of an object contained in said reply, 
compares said identified content-type nf the obiect w ith said pre-stored list of trusted 
content-types; and 

upon finding a successful match, forwards said reply to said client. 

22. (Currently Amended) The A system as per claim 20, wherein said request is an HTTP 
request and communication between said client and server is via a TCP/IP session. 
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23. (Currently Amended) A-The s ystem as per claim 20, wherein said object is anv of the 
following: an image file, an audio file, a video file, an active server page file, a script file, or 
a markup language-based file. 

24. ' (Currently Amended) TheA system as per claim 20, wherein said security switch 
communicates with said server over a network, and said network is any of the following: 
local area network (LAN), wide area network (WAN), metropolitan area network (MAN), 
wireless network, cellular network, or the Internet. 

25. (Currently Amended) An article of manufacture comprising a computer readablej tfaMe 
recording m edium having computer readable program code embodied therein implementing a 
network security level via a modifiable list of trusted file extensions and a modifiable list of 
trusted content-types, said computer readable program executing steps of m e dium 
compriping : 

(a) computer readable program codo aiding in r eceiving a request from a client 
to a server to receive an object; 

(b) computer readable program codo p arsing and identifying a file extension 
of the ob ject associated with a received request; 

(c) comput e r r e adabl e program cod e comparing an identified file extension 
with said pre-stored list of trusted file extensions; and 
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(d) eomputor readabl e program oa de- aiding in forwarding said received 
request to an inspection gateway upon scrtfinding a successful match, 

26. (Currently Amended) The article of manufacture m edium of claim 25 , wherein said 
computer readable code further executes steps of- fea ^r^ompri s ing : 

(1) comput e r readabl e- program ■ oodo aiding in forwarding a received 
request to a server; 

(2) computer - r e a da ble-program cbdo aiding receiving a reply from a 

server, 

(3) GSfflptetoiHteadablQ program code parsing a reply to identify a content- 
type of an object contained in said reply; 

(4) compti teg-fe adablo program cod e comparing an identified content-type 
of the object w ith said pre-stored list of trusted content-types; and 

(5) computer readabl e program oodo aiding in f orwarding a reply to a 
client upon finding a successful match. 

27, (Currently Amended) The article of manufacture of modium aa per c laim 26, wherein 
when said computer readable program code compares an identified file extension with said 
pre-stored list of trusted file extensions and does »et-find a match said computer readable 
program code of (1) through (5) is executed. 
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28. (Currently Amended) A method for implementing a network security level via a security 
switch, said method as implemented in said network switch comprising the steps of: 

(a) receiving a request from a client to a serve r to retrieve an object : 

>. 

(b) parsing and identifying a file extension of the object associated with said 
received request; 

(c) verifying said identified file extension as a trusted file extension; and 

(d) upon not verifying said identified file extensio n of the object, forwarding 
the received request to an inspection gateway; else forwarding said received request to said 
server, 

29. (Currently Amended) TheA method as per claim 28, said method further comprising the 
steps of: 

receiving a reply from said server; 

parsing said reply to identify a content-type of an object contained in said 

reply; 

verifying said identified content-tvpe of the object as a trusted content-type; 

and 

upon verifying said identified content-type, forwarding said reply to said 

client. 
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30. (Currently Amended) TheA method as per claim 28, wherein said steps (a) through (d) 
are performed upon verifying that said client is an authorized client. 

31. (Currently Amended) A -The m ethod as per claim 28, wherein said steps (a) through (d) 
are performed upon verifying that said server is an authorized server. 

32. (Currently Amended) A method for implementing a network security level via a security 
switch, said method as implemented in said network switch comprising the steps of: 

(a) receiving a request from a client to a serve r to retrieve an object * 

(b) verifying said received request to retrieve an object as a trusted request; 

and 

(c) upon not verifying said received request, forwarding said received request 
to an inspection gateway; else forwarding said received request to said server. 

33. (Currently Amended) TheA method as per claim 32, said method further comprising the 
steps of: 

receiving a reply from said server; 

parsing said reply to identify a type of an object contained in said reply; 
verifying said identified type of object as a trusted object type; and 
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upon verifying said identified type of object, forwarding said reply to said 
client, else, not forwarding said reply to said client. 


34. (Currently Amended) A -The m ethod as per claim 32, wherein said steps (a) through (c) 
are performed upon verifying that said client is an authorized client. 


35. (Currently Amended) TheA method as per claim 32, wherein said steps (a) through (c) 
are performed upon verifying that said server is an authorized server. 
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